What's a company secret you can share now that you no longer work there?
What's a company secret you can share now that you no longer work there?
What's a company secret you can share now that you no longer work there?
The company would bid on government contracts, knowing full well they promised features that didn’t exists and never would, but calculating that the fine for not meeting the specs was lower than the benefit of the contract and getting the buyers locked into our system. I raised this to my boss, nothing changed and I quit shortly after.
I've worked in IT consulting for over 10 years and have never once lied about the capabilities of a product. I have said, it doesn't do that natively, but if that's a requirement we can scope how much it would take to make it happen. Sadly my company is very much the exception.
The worst I saw was years ago I was working on an infrastructure upgrade of a Hyper-V environment. The client purchased a backup solution I wasn't familiar with but said it supported Hyper-V. It turns out their Hyper-V support was in "beta". It wasn't in beta. They were literally using this client as a development environment. It was a freaking joke. At one point I had to get on the phone with one of their developers and explain how high-availability and fail-over worked.
I could very well have been that developer. Usual story, sales promised the world, that our vmware-based system would run on anything and everything, and of course it's all HA and load balanced, smash cut to me on Monday morning trying to figure out how to make it do that before it goes live on Wednesday.
eh DHCP isn’t really important right? obviously if it hasn’t changed since the 80’s why would you need to reboot your server.
what are vulnerabilities?
I worked in government contracting (and government, for that matter) for years and that blows my mind. I can't remember the details, but if you even had a bad reviews, much less being found noncompliant, it could disqualify you entirely from some contract vehicles for a matter of years. Wild that there's some agency that somehow lets people get away with fraud.
Also, if that cost the government money, there's a chance you could report that after the fact and make some money.
The contractor I worked for was run by a man who used to say "if the contract says they'll blow up the contractor on delivery, we're putting in a bid and solve the problem later"
Promising features that never existed is part and parcel to a lot of software sales, whether gov or private. Speaking from post-sales experience.
Our business-critical internal software suite was written in Pascal as a temporary solution and has been unmaintained for almost 20 years. It transmits cleartext usernames and passwords as the URI components of GET requests. They also use a single decade-old Excel file to store vital statistics. A key part of the workflow involves an Excel file with a macro that processes an HTML document from the clipboard.
I offered them a better solution, which was rejected because the downtime and the minimal training would be more costly than working around the current issues.
The library I worked for as a teen used to process off-site reservations by writing them to a text file, which was automatically e-faxed to all locations every odd day.
If you worked at not-the-main-location, you couldn't do an off-site reservation, so on even days, you would print your list and fax it to the main site, who would re-enter it into the system.
This was 2005. And yes, it broke every month with an odd number of days.
downtime
minimal retraining
I feel your pain. Many good ideas that cause this are rejected. I have had ideas requiring one big downtime chunk rejected even though it reduces short but constant downtimes and mathematically the fix will pay for itself in a month easily.
Then the minimal retraining is frustrating when work environments and coworkers still pretend computers are some crazy device they’ve never seen before.
cleartext usernames and passwords as the URI components of GET requests
I’m not an infrastructure person. If the receiving web server doesn’t log the URI, and supposing the communication is encrypted with TLS, which removes the credentials from the URI, are there security concerns?
Anyone who has access to any involved network infrastructure can trace the cleartext communication and extract the credentials.
I'm not 100% on this but I think GET requests are logged by default.
POST requests, normally used for passwords, don't get logged by default.
BUT the Uri would get logged would get logged on both, so if the URI contained @username:Password then it's likely all there in the logs
As weird as it may seem, this might be a good argument in favor of Pascal. I despised learning it at uni, as it seems worthless, but is seems that it can still handle business-critical software for 20 years.
What OP didn't tell you is that, due to its age, it's running on an unpatched WinXP SP2 install and patching, upgrading to SP3, or to any newer Windows OS will break the software calls that version of Pascal relies upon.
I quit a well known ecomm tech company a few months ago ahead of (another) one of their layoff rounds because upper mgmt was turning into ultra-wall street corpo bullshit. With 30% of staff gone, and yet our userbase almost doubling over the same period, they wanted everyone to continue increasing output and quality. We were barely keeping up with our existing workload at that point, burnout was (and still is) rampant.
Over the two weeks after I gave my notice I discovered that in the third-party app ecosystem many thousands of apps that had (approved) access to the Billing API weren't even operating anymore. Some had quit operating years ago, but they were still billing end-users on a monthly basis. Many end-users install dozens of apps (just like people do with mobile phones) and then forget they ever did so. The monthly rates for these apps are anywhere from 3 to 20 dollars per month, many people never checked their bank statements or invoices (when they eventually did, they'd contact support to complain about paying for an app that doesn't even load and may not have for months or years at this point).
I gathered evidence on at least three dozen of these zombie apps. Many of them had hundreds of active installs, and were billing users for in some cases the past three years. I extrapolated that there were probably in the high-hundreds or low-thousands of these zombie apps billing users on the platform, amounting to high-thousands to low-tens-of thousands of installs... amounting to likely millions per year in faulty and sketchy invoicing happening over our Billing API.
Mgmt actually did put together a triage team to address my findings, but I can absolutely assure you the only reason they acted so quickly is because I was on the way out of the company. I'd spotted things like this in the wild previously and nothing had ever been done about it. The pat answer has always been well people are responsible for their own accounts and invoicing. I believe they acted on this one because I was being very vocal about how it would be 'a shame' if this situation ever became public, and all those end-users came after the company for those false invoices at one time. It would be a PR and Support nightmare.
You have definitely interacted with this ecommerce platform if you shop online.
I'm unfortunately dependent upon said company, as a "partner", which just means a hack indie developer who herds customers to the slaughter for the corp.
The last round of layoffs was a brutal experience for the "Plus" customers. They lost crucial advisers and support, and now the guidance available is a bored and untrained chat support thrall on the other side of the world, or a stochastic parrot.
You can smell the enshittification from here. The vendor lock-in is so intense it seemed inevitable.
You're absolutely right on all counts. And that's why I quit (without waiting around to be laid off which frankly the severance package would've been nice). I got hired into the first (private) company I applied to, I'm thriving, and I don't miss that stink of wall street/silicon valley money at all.
Does this platform have an esports team and/or is it built with Rails?
I guessing it's Amazon's old android app store? I remember lots of users having a lot of hope for that app store bringing competition and higher quality app and app store quality. Oh how naive we were.
AOL was fined some small amount for this exact thing.
I recently discovered that somehow I set up billing for a VPN directly from the company and also through Google Play. I probably got a renewal email and just followed the instructions. I went back through my bank statements and I've been double charged for probably at least 2 years and just never noticed it. It was only about $10 a month. I just feel really stupid for not noticing it until now and it's entirely my fault. I cancelled the one through Google Play. You live and you learn!
lmfao. Does the VPN company's name start with a W by any chance? If so, I am very aware of that issue as well. 😂
This has GOT to be Shopify
✅️ is a shopping platform
✅️ has an app ecosystem with a billing api
✅️ high probability that someone who shops online has interacted with a store on the platform
✅️ multiple rounds of layoffs w/ staff stretched thin
✅️ unclear ambitions of being a megaplatform, beyond what it already is
I guess we'll never know, lol
Name and shame!
I’m guessing that if you have the right kind of Pal, you could figure out a way to Pay them to help you figure it out…
just guessing here but sounds like the rain forest company.
i worked for a hybrid hosting and cloud provider that was partnered with Electronic Arts for the SimCity reboot.
well half way through they decided our cloud wasn’t worth it, and moved providers. but no one bothered to tell all the outsourced foreign developers that they were on a new provider architecture.
all the shit storm fail launch of SimCity was because of extremely shitty code that was meant to work on one cloud and didn’t really work on another. but they assumed hurr hurr all server same.
so you guys got that shit launch and i knew exactly why and couldn’t say a damn thing for YEARS
Not to put the blame on the devs, but the problems might have been attenuated by defining a proper interface layer against the server.
It's a damn single player game 💀
I worked for for the railroad. Nothing is fixed ever. I witnessed hundreds of code violations every day for years. Doesn't matter if a rail car or locomotive meets code as long as it "can travel" its good to go.
When an employee inspector finds a defective rail car management determines if it will get fixed. If the supervisor "feels" like "it's not that bad" then the rail car is "let go".
Oh, so like ambulances in the USA.
"The ambulance had issues making it unsafe (or even illegal) to drive? But it can still drive down the road? Doesn't seem too bad: keep an eye on it."
You'd think they'd have money to keep it pristine, with how much a short ambulance ride costs in the USA
A lot of US freight railroads seem to love to manage themselves into the ground.
US? Or somewhere else? Not saying that it doesn't happen other places just curious.
The use of 'railroad' instead of 'railway' would seem to indicate American English
I used to work for a popular wrestling company, billionaire owner, very profitable, would write off any OSHA penalties as the 'cost of doing business' just as they did in 1998, when The Undertaker threw Mankind off Hell In A Cell, and plummeted 16 ft through an announcer's table
I want to believe.... but the morph has always been exactly.
"nineteen ninety eight when the undertaker threw mankind off hell in a cell and plummeted sixteen feet through an announcer's table."
But I want to believe...
Edit: looking back at previous shittymorph posts. Grammar, punctuation and delivery is at much higher standard... I'm sad 😢. I'm hoping that I'm way way wrong. Can anyone reach out to shittymorph on reddit to confirm?
Confirmed imposter. Sorry everyone. 😢
That is quite an astute observation, in fact many folks would have overlooked such precise details. As you could imagine, with newness and changing situation such as a major platform shift, and as we enter a revolutionary technological time period in hopes of a prosperous fediverse, it's easy for us to become a overzealous and infatuated with all the excitement, but we must remember, it pales in comparison to the crowd's excitement in nineteen ninety eight when the undertaker threw mankind off hell in a cell and plummeted sixteen feet through an announcer's table.
You son of a removed, I don't know if you're the og shittymorph, but I missed that bastard.
Oh shit the legend lives on.
Health insurance company I worked for would automatically reject claims over a certain amount without reviewing them. Just to be dicks and make people have to resubmit. This was over 25 years ago, but it's my understanding many health insurers still pull this shit. They don't care if it's legal or not. Enforcement is lazy and fines are cheaper than medical claims.
Obviously this is in the USA.
We need a whole branch of government dedicated to fucking with insurance companies. They basically generate free money by having money, they don't actually provide any net positive outside of just having money
We need to move to single payer healthcare and just eliminate the need for insurance companies.
Big german TV production company with succesful primetime action series used rented cars for their stunts. Different people from the team rented them with full insurance, returned them crashed. They did this until every car rent in the city stopped offering insurance without retention.
This isn't bound to one production company. Close to every car video prod does this if there's expected damage.
Any chance to get to know which one? :)
1-800-got-junk? doesn't care at all about its environmental impact. No sorting what so ever happens to what goes on their trucks it all goes to landfills. All the ads will say they recycle and that they repurpose old furniture but I was threatened with being fired when I recommended donating antiques instead of dumping a load of furniture.
More jobs and more profits comes before anything else in that company, including employee health and safety. Several times I was told to enter spaces we werent trained for (attics and crawl spaces) and carry waste I legally couldn't transport (human/organic wastes and the laws states the driver is fined, not the company). One guy injured his shoulder during an attic job and was told to finish the shift or lose his job. Absoulte scum of a company with very sleazy management and possibly the labour board in their pocket as they kept "losing the files" when I tried to file a report with buddy's shoulder (he was hesistant to report for fear of losing his job).
I've had a few friends work for them out in Montreal, and their parent company (2 Men and a Truck). According to them it's a mob-operated business.
Oh no! I had a great experience with 2 men and a truck when I he used them! No idea it was associated with the 1 800 junk folks
Thats painful to read
It's pretty depressing, but the fact that soil and groundwater are almost certainly contaminated anywhere that humans have touched. I've seen all kinds of places from gas stations, to dry cleaners, to mines, to fire stations, to military bases, to schools, to hydroelectric plants, the list could go on, and every last one of them had poison in the ground.
Some places are insanely polluted to the point where you wonder how a whole company could be so braindead and essentially poison themselves.
A place not far from where I live had a chemical plant which just dumped loads of chemicals on a meadow for years. Now there are ground water pumps installed there which need to run 24/7 so that the chemicals don't contaminate nearby rivers and hence the rest of the country.
When taking samples from the pumped up water you can smell gasoline.
We're house shopping and there has been a house on a lake sitting on the market forever. I got curious and researched the lake and... It's a literal superfund site. The company that was on the other side of the lake just dumped their waste chemicals right on the shore and it has polluted both the lake and ground water forever essentially because they don't break down. I looked up the previous owner... Died of cancer. The shit that companies are and were allowed to get away with is just insane. Meanwhile right wing nut jobs want to get rid of the EPA (which was ironically created by Richard Nixon).
A place not far from where I live had a chemical plant which just dumped loads of chemicals on a meadow for years.
Sounds cheap.
What do you want? They moved it out of the environment. . .
I work in air quality and it's a similar story. It's crazy to me seeing how much is unregulated, grandfathered in, or simply not enforced.
It's just as depressing when something counts as "clean". My saddest example was a former sand pit, they spent 30 years digging out 15 meters of sand, then another 30 years filling it with anything from industrial to veterinary waste, "capped" it with rubble in the late 40s and called it clean enough.
Had a bigass job digging out the top 3 meters of random waste, including several thousand of barrels of whatever the fuck. And definitely no unexploded ordnance (spoiler, after finding several ww2 rifle stocks and helmets, the first mortarshells were dug up too). After makimg room, it was covered in sand, clay, bentonite and a protective grid.
So naturally, 3 months after that finished, some cockhead decided to throw an anchor and hit go all ahead flank on his assholes boat and tore the whole thing up. No need to fix anything though, just shovel some more sand it, that'll stop the anthrax!
This was all in open connection with a major river, of course. One people swim in.
There is a million times more counterfeit/fake items at amazon than you think, and they dont care one bit to fix the problem
I wrote a review about a counterfeit item I received. They never approved that one. I haven't bought cologne from them since.
I bought a bicycle light set (front and rear) a few years ago. They work fine (in fact, I still use the headlight; the rear still works, but it was replaced by a radar light), and I wrote a review. More recently, I was looking back through my purchases, and I came across the review I'd written, but the lights they were now selling on that page were a completely different design than the ones I had.
I edited my review to note that the current lights didn't match the ones I had, not that it'll do any good with a million other reviews of those lights. I know Amazon doesn't really care, but I very often see "There is a newer version of this item available here" links, so I'm surprised that this was possible.
One of the major issues is counterfeit baby products, specifically sleep products. In the US, sleep spaces for babies are highly regulated. The terms “bassinet, crib, and playard” are terms that can only be used for products that pass rigorous ASTM testing. If something doesn’t complete that testing then they are not allowed to use one of those terms in ads or on their manual. This is why you’ll see many products listed as “loungers” because they’re not safe for sleep. There are hundreds of products online that are horribly made and steal manuals of actual approved products. Amazon is notified (groups I’m in notify them) and they don’t care. There are also products that aren’t knock-off versions of things but just flat out lie and say a product is safe for sleep when it isn’t and will use one of the protected terms - which makes the sale of them illegal.
I always thought there's exactly 0 counterfeit/fake items at amazon, so ... 0 times million ... phew...
/s
I recall watching a video about the nature of how things are stored at Amazon warehouses - basically if there are multiple sellers offering the same item it all goes in the same bin. Even if you are providing a genuine product, there's a very good chance one of the other sellers is not, and that counterfeit gets sent out attached to your seller ID. Then you get a complaint for selling a counterfeit item someone else provided.
Then when that seller is caught and booted, they just register another trademark with 5-10 random characters and do it again. This is causing a massive headache for the US Trademark Office as well.
This is not a secret
It's what happens when it turns into a marketplace where 3rd party vendors can sell to.
Exactly why I only buy from Amazon when I can't find it after searching elsewhere for a while.
they dont care one bit to fix the problem
Who is they? Warehouse workers? Because without getting into too many details, I know someone fairly high up at Amazon corporate, and if I recall correctly her colleague runs a whole...divison? I don't know, largish multi-person unit...and their whole job is addressing the counterfeit problem. I think it's just really hard to do.
Well the easiest solution is to go back to having Amazon be the seller of products on Amazon, but we all one that ship sailed.
But if the problem is shared bin storage, the solution isn't free, but it's also not as expensive as lots of buyer confidence:
Tag every item with a QR code indicating its source when it comes into the distribution center. Use that code to identify the bad actors when there are returns and ban them.
"But what about products not shipped by Amazon?"
In that case, you know who sold and shipped the product, and if they can't get their shit together they shouldn't be allowed to work with Amazon.
Amazon has a policy of binning items with the same UPC together, regardless of the source. What this means is if you buy a valid product and any vendor who is part of their warehouse storage system sells counterfeits, then there is a chance of you getting a counterfeit part, regardless of who you buy from. This reduces the number of locations required for a given item. It just requires that you trust your vendors to not counterfeit. If they were kept separate you could easily see who is selling counterfeits, but it would require more space.
So Amazon has traded the ability to sell parts from verifiable vendors for short-term profits. At this point in the game, your best assumption is if there is any knock-off company selling the product you wish to buy you have no way of knowing it it's legitimate or counterfeit. This is currently diluting their brand and will ultimately impact their sales, if not their profits.
It's not hard to do it, its hard to do it and make the same amount of money...
I bought a pepper grinder called the Pepper Cannon. Yes, its wonderfully overengineered and costs a fortune. But it's made in the USA, and they've been pretty open with their startup process for making it.
Few months ago I was browsing across amazon and lo and behold, some pepper grinders that look identical to the pepper cannon came up. They were all cheaper knockoffs, selling for a fraction of the cost, and outright stealing PCs industrial design. I didn't buy one, as I don't need one and didn't really care enough to test if the mechanism was the same as the one I bought, but I did drop a line to the pepper cannon guys so they can try to get em delisted
Now I want a Pepper Cannon. Would you recommend getting it, before I ruin my hype by looking up the price or what is actually is? :D
Geek Squad, We were flying under the radar upgrading Macbook RAM, until one day we became officially Apple Authorized to fix iPhones, which means we were no longer allowed to upgrade Macbook RAM since the Macbooks were older and considered "obsolete" by apple, meaning we were unable to repair or upgrade the hardware the customer paid for, simply because apple said it was "too old". it was at this point in my customer interaction, that we recommend a repair shop down the road that isn't held at gunpoint by apple ;)
I worked at a 3rd party Apple retailer (they had a legacy contract from the 90s that only expired about 5-10 years ago) and they bought the cheapest RAM they could find to upgrade the Macs. They made hand over fist on RAM upgrades and still came in under what Apple charged for the same upgrade.
Isn't the ram soldered? Is it too hard to upgrade?
if you have a hot air desoldering station it shouldn't be too hard. but it's a tool that most people aren't going to have on hand.
Not for some models at the time, we also did SSD upgrades which we werent allowed to do. Even more ridiculous
Anybody knows that one waterfall attraction in the Southeast US? The one that advertises bloody everywhere? Waterfall is pumped during the dry seasons, otherwise there'd be nothing to see. Lots of the formations are fake, and the Cactus and Candle formation was either moved from a different spot in the cave, or is from a different cave in New Mexico. Management doesn't want people to know that, but fuck 'em.
Ruby Falls?
After looking it up, you can find reports from others stating the same things. When I was there as a kid, I remember that they claimed no one knew where the source of the water came from... I guess they actually know enough to help it out at least, lol
I really enjoyed it and would like to go again, but it's no Mammoth Cave.
Ye!
Gravity Falls?
Boop!
Niagara falls?
Victoria falls?
Nawh mate, that's up in New York and Canada.
Nawh mate, Rock City is different from Ruby Falls. They also hate the guts out of Ruby Falls lol
The buildings alarm code was 0711. Guess where I worked....
The programming team that is working hard on your project is just one dude and he smells funny. The programming team you’ve met in your introductory meeting are just the two unpaid interns that will be fired or will quit within the next two months and don’t know what’s happening. We don’t do agile despite advertising it. Also your project being a priority means it’ll be slapped together from start to finish 24 hours prior to the deadline. Oh and there will be extra charges to fix anything that doesn’t work as it should.
I think we work in the same company, the dude does not smell funny to me but maybe that's just me.
Are you that dude?
Can confirm. I am the smelly guy. Leave me alone and you get code. Bother me and you don't.
A lot of outsourcers do this. Here's my experience with a few companies.
At one time, these people were pretty good, but they realized they had skills and left for other countries for better pay and better working conditions. The bids got more and more competitive, cutting costs until they were literally filled with low-skilled labor who can't be promoted or leave for economic or competence reasons.
When you have a great programmer working on your project he will be cycled to a new project in 2-3 months. Your new senior developer who silently takes over the project is part time because he's working on finishing his education.
No one knows how anything works, except that one guy, who left the company half a year ago. That's how all software development is.
Programming teams I've worked with are a joke.
Company A: We got hacked and the lead dev argued for days it wasn't a hack. Malware was actively being served to customers during this time period because she refused to deal with it and there was no security team.
Company B: programming team was the IT guys nephew and some random UI designer who hadn't finished college and was never able to be employed after finishing college..
Company C: We interviewed a candidate who was way over qualified and would make our life so easy because he was eager and hungry. Instead we hired a bootcamper who had never heard of docker (half our infra is docker), react, or anything other than vanilla JavaScript. She failed our practical but still got hired because the hiring manager wanted and assistant. She has become a glorified project manager, but still has the title software engineer.
In my company we have a very modern agile workflow where QA is top priority.
At least that what we advertise. In reality it's all an unorganized clusterfuck where I'm pretty sure I am the only one who bothers to write automated tests. Who's got time to write tests bro just push that shit out ASAP we'll deal with it when the client calls us in the middle of the night to complain about previously-working shit being broken now.
I've worked for one company that actually did it right (complete with pair programming, even). It was pretty nice.
Too bad we were apparently the "experimental?" team and the only one in the whole company doing it that way.
I used to work for a cable company whose name rhymes with "bombast". They offer a wifi service whose name is a derivation of the word "infinity". Most of the hotspots for this wifi service are provided by the Bombast wireless routers that cable customers have in their homes. So if you're a Bombast customer, you're helping to pay the electrical bill and giving up bandwidth in order to provide Infinity wifi.
Another fun Bombast story: the founder, a man who always wore a bowtie, died a few years ago. At a memorial service in his honor, a number of vice presidents and other executives (including my boss at the time) wore bowties. Everyone who wore a bowtie to the service was fired within a week.
Why were they fired?
The bowties
The shared internet thing is a setting that comes turned on for Xfinity routers by default (aka the ones you rent from them). If you go into the settings of the router you can turn the wifi sharing setting off.
If you disconnect your existing connection, and got a new one using another name, saying that you're new occupant, you can get that new connection discount (over and over again).
I've never had to disconnect. Once the discount has expired, I just go online and check the prices for changing my internet speed. Most of the time there's a discounted one (with a contract agreement of course). But I've been switching back and forth between different speeds for years and saved a lot of money that way. Also buy your own modem/router instead of paying rental fees for their equipment.
Careful, sometimes they'll come out just to pull your plug from a concentrator when you disconnect, or it just happens when they're hooking up a new customer and yours gets unplugged to make room. But then they turn around and charge like $50 just to come out and plug that back in for a new install. That can be the entire install, you can bring your own modem and have everything fine inside, but some yahoo charges $50 to come out and plug some coax into a concentrator in a box 20 ft from your house that they unplugged for free last week.
With Time Warner you don't even have to do that you can just call up and ask, they'll probably give you the discount. They absolutely do not care.
I worked for a furniture store. They used to buy mattresses and furniture sets for like $200-300 and arbitrarily sell them for around $700-1000. I used to be able to haggle with people and still sell them for like double what they cost. I hated that job for so many reasons
We used to live near a furniture store. It had a going out of business sale when we moved in. The sale was still going on when we moved out 6 years later. Then I started noticing how many other furniture stores seemed to be having going out of business sales.
Used to work in garden/hardware supply company. The best selling product cost $16 for manufacturing and delivery to our warehouse from China. They would sell in [national hardware chain] for $699. It was about a 40% markup in store, the rest of that $699 was eaten up by warehousing, shipping and staffing costs. If you couldn't move that product in a reasonable timeframe then you'd start losing money on warehouse costs.
I figure most items I've purchased are 40% profit, 50% warehouse/shipping/staffing, 10% manufacturing/import.
An AI company... They used to manually change system event logs to show it wasn't their software that caused the downtime for our clients.
Bought over a million dollars worth hardware (25% of which didn't even got racked), over 200 46inch LED screens that no one used, and very expensive offices at posh locations in the bid to increase its IPO valuation.
I've always been wondering to what degree are logs accurate, or rather believable as presented.
Such as when it comes to affiliate marketing, or ads. How can I, as a customer, know the numbers Amazon or Google about how many people used my link / seen my ad, aren't full of shit?
Well related to that Google has recently been accused of faking that data sooo https://qz.com/google-video-ads-violate-its-own-standards-1850585533
Worked at a globally popular fast food francise many years ago. They had collection boxes for a charity that they raised money for. None of the money went to that charity, but was divided between owners and managers.
I always say to the cashiers who are forced to ask us to donate that I will be donating directly to the charity online. Not through a multi million dollar company. When I think how a company does this for no other reason for free pr on other people’s coin, I have absolutely no guilt saying nope.
Oh, it's more than PR. They get to donate your money and get the tax break for doing it.
The first steel mill I worked for, the test requirements were more of a suggestion than a rigid specification. I, a trained and skilled engineer with the capacity to make informed decisions, had to run all rejections by my boss who would tell me "it's close enough" even if it wasn't. Sometimes it bit us in the ass with warranty failures, but the warranties were probably cheaper than internal rejections (and what is brand perception worth?).
My second steel mill job, I was the one making the rejection decisions. I did the hard thing and rejected our failures but I also troubleshot them to prevent recurrence, making our product and capability better over time.
It very much matters who you buy your steel from; two mills can have vastly different performance for the same products based on how they handle these situations.
A lot of companies seems to do that a lot, cut corners on the quality a little bit, push out the extra reserve capacity, etc. Then when a complaint occurs y'all quality engineers get the short end of the stick. What doesn't cost the company costs us more time, effort, mental and physical health.
I’m curious: is this a major lawsuit waiting to happen, or is the mill somehow protected from that?
I’m picturing a situation where bad steel is provided, used by the purchaser, and later the product they put the steel in fails, causing a serious accident, death, or other severe issue. does the mill’s responsibility somehow end at warranty replacement or have they created a bigger liability for themselves?
This is indeed illegal and immoral. Example.
Elaine thomas did this, lied to her bosses, and the industry. People even considered her an expert. Reading the usdoj interviews with her, she may have just been arrogant, and kinda dumb.
Section 54 of the complaint against Elaine Thomas
During the November 19, 2019 interview, THOMAS criticized the -100F Charpy V-notch test. THOMAS said -100 F was a "stupid number" to test because nothing operated at -100 F in the water. She also admitted, however, she did not know the Navy's reasoning for testing at this temperature. THOMAS acknowledged that someone at Bradken had been changing failing -100F Charpy V-notch testing results to passing. THOMAS also admitted that she could have been the one to raise the numbers because she believed the -100F Charpy V-notch testing was "a stupid stupid requirement. When asked why she raised the yield strength numbers for the 1990 heat, THOMAS stated, "It looks like I raised the numbers to make it pass. This was not the right thing." THOMAS said occasionally she would consider rounding up -100F Charpy V-notch results if the numbers were "super duper" close to passing.>
I worked for an online payment company you all know. Many eployees have access to the main DB which holds all transactions and names and everything in clear text. You could basically find out all PII (personal identification information) of any celebrity you wanted given they had anaccount. Address, phone number, credit card and all. If you knew a bit of SQL you could basically find whoever person you wanted and get purchase history and all.
Cant say I didnt use this to find stuff about my exes or various celebrities.
Address, phone number, credit card and all.
Oh wow. As someone who used to work in Fintech and who built a PCI-DSS compliant system got it successfully certified, it would be a shame if somebody reported that company for violations that could get them to lose their PCI-DSS certification. I mean, do they just bribe their PCI-DSS auditor to overlook this, or have they just managed to hide this blatant issue so far?
Its been about 10 years ago I wasnt a pci expert then as i am now. My understanding today is that the db was probably pci compliant. But access to it was pretty promiscuous.
Acronis Backup charges you for local data backups from one device to the other. So basically if you are using Acronis to move data from your local drive to another local device like a NAS, you pay money for every gigabyte transferred. During the time I worked for them, the script to run the transfer was literally the most simple robocopy command, even simpler than one you could write yourself. And they still do it, charge for local to local data movement. Its fucking insane. One of my clients had a $15k a month bill for local data movement. Straight up highway robbery.
Office Depot sells printers at very low (or even negative) margin, and then inflates the margins on cables, paper, ink, and warranty. If you want the best deal, get the printer from OD, and everything else you need somewhere else. That $20 USB cable they sell costs them $1 and you can get the same or better online for $2.68.
I appreciate the exact price of $2.68.
Aye this is 100% correct! I used to manage a store in NC. Also none of the tech services are actually done by the associates. We just attach a USB with a program for someone else to fix it remotely.
This principle applies to many stores. If you shop at a mattress store the mattress pads are priced at triple the value.
Who in the world is using a USB printer in 2023?
Ethernet bby
Who in the world would put a cheap blackbox in their household and give it access to the internet.
Selfhosted CUPS bby!
The reasonably new android phones seem to detect unix network printers now, so wireless printing works as well. Mostly... we're talking about the printers after all.
Who is using an Ethernet printer in 2024?
Wifi bby
I worked as a pastor and professor for a global, evangelical television ministry/college. They knowingly conceal scholarship on the Bible and punish their pastors for asking any questions that undermine their most closely held traditions (including anti-evolution, mental illness is supernatural, etc.). They tell their US viewers that they can't call themselves Christians if they don't vote Republican, while still enjoying tax-exempt status. They use pseudohistorians to inspire Christian Nationalism over their network, and are one of the largest propaganda networks for the Religious Right. A U.S. Capitol police commander told me his men were fighting people who were wearing the network's brand.
Sounds like you escaped a violent theocratic cult.
This local single location grocery store by my house would unwrap and rewrap meat packages when it hit expiration dates in order to generate a new label with a new expiration date. If the meat looked bad, it would be added to the meat grinder to make ground beef.
Not to be that person buuut...you should really report this. Someone could die.
Kwik-e-mart hi Apu
Over a decade ago I worked as a freelancer for an Investment Bank (the largest one that went bankrupt in the 2008 Crash, which was a few years later) were the head of the Proprietary Trading Desk (the team of Traders who invest for the profit of the bank) asked me if I could change the software so that they could see the investments of the Client Trading Desk (who invest for clients with client money) was making, with the assent of the latter team.
Now if the guys investing money for the bank know what they guys investing customer money are doing they can do things like Front-Run the customer trades (or serve them at exactly the right price to barelly beat the competiotion) thus making more profits for the bank and hence get bigger bonuses. This is why Financial regulations say that there is supposed to be so-called Chinese Walls between the proprietary trading and the customer trading activities: they're supposed to be segregated and not visible to each other.
Note that the heads of both teams were mates and already regularly had chats, so they might already have been exchanging this info informally.
I was quite fresh in there (less than 1 year) and the software system I worked in at the time was used by both teams, but when I started looking into it I saw that the separation was very explicitly coded in software and that got me thinking about what I had learned from the mandatory compliance training I had done when I first joined (so, yeah, that stuff is not totally useless!!!)
So I asked for written confirmation from the heads of both teams, and just got some vague response e-mails, no clear "do such and such".
So I played the fool and took it to a seperate team called Compliance (responsible for compliance with financial regulations) saying I just wanted to make sure it was all prim and proper, "just in case".
Of course, it kinda blew up (locally) and I ended up called to a meeting with the heads of the Prop Desk and whatnot - all stern looks and barelly contained angry tones - were I kept playing the fool.
Ultimatelly it ended up not being a problem for me at all, to the point that after that bank went bust and its component parts were sold to another bank, the technical team manager asked me to come back to work with the same IT group (remember, I was a freelancer) with even greater responsabilities, so this didn't exactly damage my career.
That said, over the years there were various cases of IT guys in large investment banks who went along with "innocent" requests from the Traders and ended up as the fall-guys for subsequent breaking of Finance Regulations, serving jail time, so had I gone along with that request I would've actually risked ending up in jail.
(Financial Regulators were and are a complete total joke when it comes to large banks, which actually makes it more likely that some poor techie guy will be made the fall guy to protected the bank and its heads).
This is your friendly reminder that the only person who went to jail for the diesel gate is the software developer who implemented the test-cheating practice. Not the managers, the directors who asked for it or anybody else
I worked with people from many indian IT companies who just outright clone github repos and tell clients they developed the entire thing from scratch.
I work in IT. Most systems have laughable security. Passwords are often saved in plain text in scripts or config files. I went to a site to help out a very large provincial governmental organization move some data out of one system and into another. They sat me down with a loaner laptop and the guy logged me into his user account on the server. When I asked for escalated privileges, he told me he'd go get someone who knew the service account passwords.
After a few minutes, I started poking around on my own... And had administrative access within an hour. I could read the database (raw data), access documents, start and stop the software, plus, figured out how to get into the upstream system that fed data to this server... I was working on figuring out the software's admin password when the guy came back. I'm sure that given some more time, I could have rooted the box because the OS hadn't been updated in years.
I work as a pentester and Red Teamer, I can attest that even for some large companies, you always stumble upon something that's just dumb, and completely renders their multi-million investment they are probably making into security tools and solutions worthless.
Did you say in a 90s movie hacker voice, "I'm in."?
Having worked network support, the number of times I've been on a screen share with someone who opens an excel sheet from the share drive that holds all the root passwords for every network device they own is high. A bad actor could take down some very large companies with some simple social engineering skills.
Yes, in the mid 1990s, large banks in the USA were being electronically compromised so often that they wouldn’t investigate or pursue a loss if it was under $50k.
I work in pest control and 99% of the shit we use. You can buy without having a license. The license just covers us to use the products on other people's houses responsibly. If you really want to do pest control, you only need a few chemicals and they are all easily obtainable on Amazon.
I worked as software engineer and my boss tolerated me going to office at 2pm and leave at 9pm. It's against company policy, certainly, but no one talked about it. It still is my most productive and happy time.
I'm changing jobs at the moment. I accepted a position at a UK office of an American company which I was a perfect fit for but they wouldn't tolerate remote working or flexitime. A few days after, I was offered a job at a UK company offering 80% remote work and very generous flexi but for £5000/year less. I let the American company know I wouldn't be starting with them after all. Honestly, it this day and age flexible hours and such aren't a big ask for most information workers and work-life life balance is too important.
This comment is not like the others, lol.
Good on your manager.
I worked for a pretty popular magazine back in the late 90's. One day near the beginning/middle of 2000, we were all called down to the bullpen for a last minute meeting by management and marketing. (That's never a good sign.)
We were told that we have a great product with amazing writing, but marketing doesn't know how to sell it so they're closing us down. Instead, we went online only. I was the web developer so I survived the firings.
So then we figured that we were set because our website produced more content and had more traffic than any of the company's other websites. However, in March of 2001, we had another emergency meeting. Again, we were told our content was great, but the company was going in another direction. Instead of producing our own content, the company was going to just repost other sites' content. I and everyone else in my team were let go.
Needless to say, the whole "we'll just repost what other people posted" plan didn't go so well. Last time I checked, the company wasn't doing very well at all.
Probably not, but sounds like Cracked.com?
We used to sell Windows built-in Recovery tool.
I mean this is actually pretty impressive, I don't think Microsoft themselves would be confident enough to sell it
You didn't sell the recovery tool, you sold the warm and fuzzy feeling that somebody was looking out for them.
Oh my god
Worked at a newspaper for a few years.
With very few exceptions, they do not give a fuck about you or the news. The advertisers are their customers and your attention is their product.
Journalism died decades ago.
Decades ago? This has always been the case. It was the case 50 years ago. Still is now.
Same with cable TV, which is why I don't watch it.
I worked at a fruit processing plant. We found maggots in the blueberries. Line got shut down for obvious reasons.
Owner of the company came in and said 'pack them anyway'. We knowingly sent out blueberries with maggots in them.
Needless to say that company sucks and people hate working there.
What's the company?
I get your point but are you going to reply this to every single comment
I would love to say but its a small company in a fairly small community and I dont want to say for privacy reasons. Wouldnt make it too hard to figure out where I live.
Lets just say if you buy any blueberries labelled IFC (international fruit company) there is a chance they are our berries.
Just to be clear, I did NOT work for the IFC. We just packaged our berries for them and sent them out with their label. I cannot comment on the quality of IFC products in general.
I worked at an ISP. The DHCP server we use for our DSL offering was made in the 90s and hasn't been updated since.
I've worked for a few of the larger ISPs in the US. They all have their own special weird shit like a windows NT machine shoved in a corner in a CO in west Texas that you have to remote desktop into and run some java applet from the 90 to log into a hardwired machine from the 70s just to set up a voicemail box for a phone line. Ain't broke don't fix it leads to some wild setups at companies you wouldn't expect it from.
Frankly, I don't see this a a problem as long as the software is up to date and the hardware is sound. I bet there are thousands of SPARC servers out there processing data 24/7 since 1995.
Might want to get on updating it soon for IPV6 though
Worked support for an electricity supplier. I was able to see a frightening amount of info about the customers. Even past ones who had moved elsewhere.
We also kept notes about each call, email, web or app chat. So if you were an asshole in the past, everyone will know going forward.
Also fuck landlords and landladies etc. More often than not, they were shitty to deal with.
Also we would often use Google Maps and Streetview to see what your house looked like. We also had pictures of the inside because the installation techs took pictures to confirm that works were completed as specified.
Alll of this was available to us for any reason, at any time with no oversight. And none of it was encrypted. There was also government websites in use up to 2020 that required internet explorer to use and had passwords as trivial as 'Password1'.
I left that job because the pay was lousy and the stress was pretty full on. I respected a lot of people that worked there. Both higher ups and people who came after me. But fuck was there a lot of potential for bad actors or like stalkers etc to mess with your info.
I would reccomend to everyone. Please use password managers. Especially decent open source ones like Bitwarden. Take note of every piece of info that you give a company. From your phone number, address, email etc to even when you contacted them. Also try to not have your home look like an abandoned hovel on Streetview lol. Easier said than done I know. But it may affect your dealings with support people that you need help from. And lastly, please dont use Password1 as a login. Ever. Like please.
i would recommend Keepass
Just remembered another one:
Have you ever had an anonymous survey sent to you by your work or by a company your work has hired? They're not anonymous. Management knows what your opinions are and will use them against you.
I worked for a consultant that would try and help fix businesses. The worst example I can think of was when I saw one person had answered a survey question saying that their employer had a "blame culture". Rather than trying to work on the processes or address why something had gone wrong, staff would start pointing fingers to keep out of trouble. This didn't fix anything and only made people spend all the time covering their posteriors.
The manager called a general meeting of everyone at that site and then singled out the employee who'd mentioned the blame culture, blaming him for saying there was a blame culture. The employee then pointed out that they'd been told, in writing, that the survey was anonymous. That employee called the manager a liar and then she lost control of the meeting, with lots of employees calling her a liar and several storming out. They weren't in business the next year.
You work in the US, right?
I’m so sure that this would be absolutely illegal in the EU. Privacy laws are rather strict here and I can’t imagine that it would be legal in any way to say that you’re doing an anonymous survey if it isn’t actually anonymous.
I live in the UK.
The consultancy never claimed that the surveys were anonymous. Pretty much every manager did when they sent it out to their employees. I guess lots of bosses in the UK have no problem with lying to their employees.
Privacy laws are only as good as their enforcement. I've seen first hand the slap-dash attitude the NHS has to patient confidentiality and the police using databases for their own personal reasons. I've also experienced UK primary schools violating confidentialities. No repercussions for any of them.
At Disneyland, Mickey Mouse is always played by a woman, due to the small costume. So if you put your arm around him for a photo, try not to accidentally touch Mickey’s boobs.
I think, from the people reading this...they will definitely do the exact opposite.
The succinct matter of fact way you impart on the text leads me to think this is a kind of personal public faux pas
Nope, I was just backstage friends with several Mickeys. I worked in wardrobe.
Small man exist.
Everyone pretends I don't.
I know this thread is old but: so many HIPPA violations, oh my God. I am a pediatric therapists/child psych, and the clinic I used to work at constantly stored client data in the most insecure ways, and therapists and staff would discuss client names, diagnosis', address, EVERYTHING openly in the break room. I complained at one point, but it went nowhere. Turns out nobody cares, lol. They also frequently ignored the best interests of our clients to maximize profit from insurance (leaning towards fraud). I ultimately left the company when my boss blatantly violated the safety of one of my clients by refusing to send her home when she had a fever of 104 F. Sure, working with kids means everyone gets sick a lot, but when the child is THAT sick, they need to be in a hospital, not in a hot, cramped room with a therapist.
Military equipment is sold to the PRC and mislabeled as COTS, i.e. civilian.
My wife worked at a pretty well-known hiking supplies store in our country. The retail price is sometimes over x4 the manufacturing cost and extremely marked up. The amount of faulty products with manufacturing faults is really high, with the suppliers 100% aware but gave the stores discounts on the wholesale price just to push units, even though the clothes/bags/shoes would break after a year or so of light use.
I work for a MSP that works a lot with very large tech companies. Most of these companies outsource a lot of work to India. I frequently have to remote in and help them with our product. You'll see passwords in plain text being thrown around in teams chats, .txt documents on the desktop and emails like candy. I will frequently work with individuals with titles like "Cloud Engineer" to "Solutions Expert" that I swear have never opened a terminal window in their life and unable to follow basic IT instructions. I have worked with a lot of very good Indian engineers, but I swear chronyism has a lot of people put into positions that they aren't really qualified for.
A certain fruit company knows about you WAY more than you can imagine, and most of the information is accessible to even the lowest ranks of support. And yeah, my NDA is finally over.
The iCloud support app? I’ll say it if you won’t. Apple needs to be shamed into doing something about that
When you say fruit company, do you mean Apple or Chiquita?
Is it time to update the banana wars wiki page?
When a report came out on car security, one thing which stood out was how any technician of any of the client car manufacturers could just browse through gps data, cameras etc for millions of customers' cars.
One of the many ways they found out was because one system accidentally gave access to customers as well as techs (pro tip: remember to check group membership when doing LDAP authorisation!)
The majority of tech startups are super chaotic and barely keeping things running. More than you would ever imagine.
Not strictly a company secret, but I had to sign an NDA for it, because... reasons.
I used to work for a massive conglomerate, these guys are making from components for satellites and tank to rubber gloves for hospitals, and everything in between. My job was to help the company implement regulations, work with auditors and generally follow product specific rules.
So I was on these 2 New Product Development teams and because the products needed some very specific testing equipment, we started working with local authorities and some contractors to build the testing station in the future factory. We drafted plans, prepare documents, we had an auditor come and see the place, the contractor came and checked what he needed to do, everything was going according to plan.
While all of this was happening, I was on a separate project where we were working on closing down the above mentioned factory.
We didn't investigate an online theft from any bank account unless it was over US $100k.
A friend of mine was a manager at a fairly upscale women's clothing store.
She said that even at 95% discounts, they could turn a profit.
In Belgium we have a law stating that no commerce can ever sell at a loss. Yet we still see 70% discounts, in stores for every budget range.
Yet we still see 70% discounts, in stores for every budget range.
I bet those stores also claim that prices need to go up "because of inflation". Fraudsters.
Battersea Dogs Homes senior dog carers are employed based on their PR experience and not at all on their experience at looking after dogs
I worked for a government contractor that would have me log into to classified data to monitor uptime.
I was not cleared to view it nor did I have my own account so my manager had me log in with his credentials.
In the US where I'm located, that's a felony for the individuals and a massive fine for the company.
Worked for an online poker company. The information they stored from users devices was insane. Registration and connection ips, mac addresses, disk serials. Basically any identifiable piece of pc information they stored in their database so they knew who was logging in where and from what computer.
So, purely hypothetically, if I used three separate computers, connected with 2 of them through VPNs set to different locations, would they look like 3 different players, even if located in the same room?
The dealership I worked for gave out loans they knew people couldn’t afford, ignored safety items, slapped inspection stickers that didn’t match vehicles to get them on the lot. Ran a lift that was jerry rigged because the wiring busted along with the hydraulic tank.
Employee bought a vehicle and his manager watched where he went on his lunch (via GPS installed by said company into sold vehicles). Funnily enough it was to an interview.
Oh another one. School bus company 1 is one of the largest in the US. In between runs a buddies transmission starts leaking on his bus. He calls the terminal on my phone to let them know.
“Keep driving keep it going, we are not sending out another bus to you.”
Transmission in a 45ft flat nose busts fully in the middle of one of the busiest intersections in the town. He calls over radio letting them know it busted as he told them.
“What do you mean this is first time I’m hearing about this”
Flat nose I drove kept writing up for not having heat and turning it into the people I was told. This went for an entire winter and I didn’t have heat until after the thaw and spring started. Mechanic never knew that bus had been being written up. They were hiding slips. Same bus, folding door let go and was flapping in the wind with a bus full of students. Over the radio they said to keep driving and refused to send a replacement.